June 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:0759-1: libvpx: Fixed a buffer overread
by opensuse-security＠opensuse.org 19 Jun '12

19 Jun '12

openSUSE Security Update: libvpx: Fixed a buffer overread ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0759-1 Rating: low References: #765055 Cross-References: CVE-2010-4489 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A buffer overread was fixed in libvpx which could lead to crashes of applications using libvpx. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-331 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libvpx-debugsource-0.9.5-8.1 libvpx-devel-0.9.5-8.1 libvpx0-0.9.5-8.1 libvpx0-debuginfo-0.9.5-8.1 vpx-tools-0.9.5-8.1 vpx-tools-debuginfo-0.9.5-8.1 References: http://support.novell.com/security/cve/CVE-2010-4489.html https://bugzilla.novell.com/765055

1 0

openSUSE-SU-2012:0755-1: moderate: python-tornado: Update to version 2.3
by opensuse-security＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Security Update: python-tornado: Update to version 2.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0755-1 Rating: moderate References: #765475 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update includes several security fixes added in version 2.2.1 and 2.3 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-330 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): python-tornado-2.3-2.4.1 References: https://bugzilla.novell.com/765475

1 0

openSUSE-RU-2012:0754-1: amanda: collective update
by maintenance＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Recommended Update: amanda: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0754-1 Rating: low References: #739222 #755268 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for amanda: - 739222: Amanda is not running with the correct permissions behind xinetd - 755268: amanda backup system built without ssh support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-328 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): amanda-2.6.1.1-16.1 amanda-debuginfo-2.6.1.1-16.1 amanda-debugsource-2.6.1.1-16.1 References: https://bugzilla.novell.com/739222 https://bugzilla.novell.com/755268

1 0

openSUSE-RU-2012:0753-1: MesaGLw: Added some more exported functions
by maintenance＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Recommended Update: MesaGLw: Added some more exported functions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0753-1 Rating: low References: #736863 #764706 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update of MesaGLw adds some missing exported functions that were lost due to a visibility cleanup. It also adds baselibs to allow building biarch MesaGLw applications. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-327 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): MesaGLw-debugsource-7.10.2-4.4.1 - openSUSE 12.1 (i586 x86_64): MesaGLw-7.10.2-4.4.1 MesaGLw-debuginfo-7.10.2-4.4.1 MesaGLw-devel-7.10.2-4.4.1 - openSUSE 12.1 (x86_64): MesaGLw-32bit-7.10.2-4.4.1 MesaGLw-debuginfo-32bit-7.10.2-4.4.1 MesaGLw-devel-32bit-7.10.2-4.4.1 - openSUSE 12.1 (ia64): MesaGLw-debuginfo-x86-7.10.2-4.4.1 MesaGLw-debuginfo-x86-debuginfo-7.10.2-4.4.1 MesaGLw-x86-7.10.2-4.4.1 References: https://bugzilla.novell.com/736863 https://bugzilla.novell.com/764706

1 0

openSUSE-RU-2012:0752-1: amanda: collective update
by maintenance＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Recommended Update: amanda: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0752-1 Rating: low References: #739222 #755268 #755272 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues for amanda: - 739222: Amanda is not running with the correct permissions behind xinetd - 755268: amanda backup system built without ssh support - 755272: amrecover (part of amanda backup) fails with "can't talk to tape server: service amidxtaped:" Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-329 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): amanda-3.3.0-21.4.2 amanda-debuginfo-3.3.0-21.4.2 amanda-debugsource-3.3.0-21.4.2 References: https://bugzilla.novell.com/739222 https://bugzilla.novell.com/755268 https://bugzilla.novell.com/755272

1 0

openSUSE-RU-2012:0751-1: util-linux: make mount honor 'noexec' and 'user' option
by maintenance＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Recommended Update: util-linux: make mount honor 'noexec' and 'user' option ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0751-1 Rating: low References: #764852 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The util-linux mount program was fixed to make mount honor 'noexec' option in combination with 'user' Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-324 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): util-linux-debugsource-2.20.1-1.14.1 - openSUSE 12.1 (i586 x86_64): libblkid-devel-2.20.1-1.14.1 libblkid1-2.20.1-1.14.1 libblkid1-debuginfo-2.20.1-1.14.1 libmount-devel-2.20.1-1.14.1 libmount1-2.20.1-1.14.1 libmount1-debuginfo-2.20.1-1.14.1 libuuid-devel-2.20.1-1.14.1 libuuid1-2.20.1-1.14.1 libuuid1-debuginfo-2.20.1-1.14.1 util-linux-2.20.1-1.14.1 util-linux-debuginfo-2.20.1-1.14.1 uuidd-2.20.1-1.14.1 uuidd-debuginfo-2.20.1-1.14.1 - openSUSE 12.1 (x86_64): libblkid-devel-32bit-2.20.1-1.14.1 libblkid1-32bit-2.20.1-1.14.1 libblkid1-debuginfo-32bit-2.20.1-1.14.1 libmount-devel-32bit-2.20.1-1.14.1 libmount1-32bit-2.20.1-1.14.1 libmount1-debuginfo-32bit-2.20.1-1.14.1 libuuid-devel-32bit-2.20.1-1.14.1 libuuid1-32bit-2.20.1-1.14.1 libuuid1-debuginfo-32bit-2.20.1-1.14.1 - openSUSE 12.1 (noarch): util-linux-lang-2.20.1-1.14.1 - openSUSE 12.1 (ia64): libblkid1-debuginfo-x86-2.20.1-1.14.1 libblkid1-debuginfo-x86-debuginfo-2.20.1-1.14.1 libblkid1-x86-2.20.1-1.14.1 libmount1-debuginfo-x86-2.20.1-1.14.1 libmount1-debuginfo-x86-debuginfo-2.20.1-1.14.1 libmount1-x86-2.20.1-1.14.1 libuuid1-debuginfo-x86-2.20.1-1.14.1 libuuid1-debuginfo-x86-debuginfo-2.20.1-1.14.1 libuuid1-x86-2.20.1-1.14.1 References: https://bugzilla.novell.com/764852

1 0

openSUSE-RU-2012:0750-1: important: Softwarestack update
by maintenance＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Recommended Update: Softwarestack update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0750-1 Rating: important References: #730824 #749418 #761985 #765164 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for the software management: libzypp (11.4 and 12.1): - Fix processing of weak locks (bnc#749418, bnc#765164) - Fix typos in zypp.conf (bnc#761985) zypper (12.1 only): - Don't treat patches with licensed packages as interactive is --auto-agree-with-licenses is used (bnc#730824) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-326 - openSUSE 11.4: zypper in -t patch openSUSE-2012-326 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libsolv-debugsource-0.0.1-3.11.1 libsolv-demo-0.0.1-3.11.1 libsolv-demo-debuginfo-0.0.1-3.11.1 libsolv-devel-0.0.1-3.11.1 libsolv-devel-debuginfo-0.0.1-3.11.1 libsolv-tools-0.0.1-3.11.1 libsolv-tools-debuginfo-0.0.1-3.11.1 libzypp-10.4.5-1.17.1 libzypp-debuginfo-10.4.5-1.17.1 libzypp-debugsource-10.4.5-1.17.1 libzypp-devel-10.4.5-1.17.1 perl-solv-0.0.1-3.11.1 perl-solv-debuginfo-0.0.1-3.11.1 python-solv-0.0.1-3.11.1 python-solv-debuginfo-0.0.1-3.11.1 ruby-solv-0.0.1-3.11.1 ruby-solv-debuginfo-0.0.1-3.11.1 zypper-1.6.26-5.22.1 zypper-debuginfo-1.6.26-5.22.1 zypper-debugsource-1.6.26-5.22.1 - openSUSE 12.1 (noarch): zypper-log-1.6.26-5.22.1 - openSUSE 11.4 (i586 x86_64): libzypp-8.13.6-18.1 libzypp-debuginfo-8.13.6-18.1 libzypp-debugsource-8.13.6-18.1 libzypp-devel-8.13.6-18.1 References: https://bugzilla.novell.com/730824 https://bugzilla.novell.com/749418 https://bugzilla.novell.com/761985 https://bugzilla.novell.com/765164

1 0

openSUSE-RU-2012:0749-1: gnome-keyring: Split off the pkcs11 module
by maintenance＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Recommended Update: gnome-keyring: Split off the pkcs11 module ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0749-1 Rating: low References: #741178 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update splits off the pkcs11 module and so allows adding a 32bit baselib for it, for usage by the 32bit libgnutls from e.g. Wine. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-322 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): gnome-keyring-debugsource-3.2.1-2.6.1 - openSUSE 12.1 (i586 x86_64): gnome-keyring-3.2.1-2.6.1 gnome-keyring-debuginfo-3.2.1-2.6.1 gnome-keyring-pam-3.2.1-2.6.1 gnome-keyring-pam-debuginfo-3.2.1-2.6.1 libgck-1-0-3.2.1-2.6.1 libgck-1-0-debuginfo-3.2.1-2.6.1 libgck-devel-3.2.1-2.6.1 libgck-modules-3.2.1-2.6.1 libgck-modules-debuginfo-3.2.1-2.6.1 libgcr-3-1-3.2.1-2.6.1 libgcr-3-1-debuginfo-3.2.1-2.6.1 libgcr-devel-3.2.1-2.6.1 p11-kit-module-gnome-keyring-3.2.1-2.6.1 p11-kit-module-gnome-keyring-debuginfo-3.2.1-2.6.1 - openSUSE 12.1 (x86_64): gnome-keyring-pam-32bit-3.2.1-2.6.1 gnome-keyring-pam-debuginfo-32bit-3.2.1-2.6.1 libgck-1-0-32bit-3.2.1-2.6.1 libgck-1-0-debuginfo-32bit-3.2.1-2.6.1 libgcr-3-1-32bit-3.2.1-2.6.1 libgcr-3-1-debuginfo-32bit-3.2.1-2.6.1 p11-kit-module-gnome-keyring-32bit-3.2.1-2.6.1 p11-kit-module-gnome-keyring-debuginfo-32bit-3.2.1-2.6.1 - openSUSE 12.1 (noarch): gnome-keyring-lang-3.2.1-2.6.1 - openSUSE 12.1 (ia64): gnome-keyring-pam-debuginfo-x86-3.2.1-2.6.1 gnome-keyring-pam-debuginfo-x86-debuginfo-3.2.1-2.6.1 gnome-keyring-pam-x86-3.2.1-2.6.1 libgck-1-0-debuginfo-x86-3.2.1-2.6.1 libgck-1-0-debuginfo-x86-debuginfo-3.2.1-2.6.1 libgck-1-0-x86-3.2.1-2.6.1 libgcr-3-1-debuginfo-x86-3.2.1-2.6.1 libgcr-3-1-debuginfo-x86-debuginfo-3.2.1-2.6.1 libgcr-3-1-x86-3.2.1-2.6.1 p11-kit-module-gnome-keyring-debuginfo-x86-3.2.1-2.6.1 p11-kit-module-gnome-keyring-debuginfo-x86-debuginfo-3.2.1-2.6.1 p11-kit-module-gnome-keyring-x86-3.2.1-2.6.1 References: https://bugzilla.novell.com/741178

1 0

openSUSE-RU-2012:0748-1: atftp: fix race condition between threads
by maintenance＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Recommended Update: atftp: fix race condition between threads ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0748-1 Rating: low References: #599856 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of atftpd fixes a race condition where two server threads pick up a single client, which causes the transported file being overwritten (bnc#599856) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-323 - openSUSE 11.4: zypper in -t patch openSUSE-2012-323 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): atftp-0.7.0-147.6.1 atftp-debuginfo-0.7.0-147.6.1 atftp-debugsource-0.7.0-147.6.1 - openSUSE 11.4 (i586 x86_64): atftp-0.7.0-143.152.1 atftp-debuginfo-0.7.0-143.152.1 atftp-debugsource-0.7.0-143.152.1 References: https://bugzilla.novell.com/599856

1 0

openSUSE-RU-2012:0747-1: rhythmbox: Fix startup crash and plugins
by maintenance＠opensuse.org 18 Jun '12

18 Jun '12

openSUSE Recommended Update: rhythmbox: Fix startup crash and plugins ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0747-1 Rating: low References: #765805 #765943 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for rhythmbox: - 765805: Fix crash at startup and plugins - 765943: Fix plugins and disable the magnatune plugin Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-325 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): rhythmbox-0.13.3-17.4.1 rhythmbox-debuginfo-0.13.3-17.4.1 rhythmbox-debugsource-0.13.3-17.4.1 rhythmbox-devel-0.13.3-17.4.1 - openSUSE 12.1 (noarch): rhythmbox-lang-0.13.3-17.4.1 References: https://bugzilla.novell.com/765805 https://bugzilla.novell.com/765943

1 0